Added bit to lock ident down to admin set, unless user is admin